Privacy Policy

1. Scope and operator

This policy applies to the Naggy Buddy Chrome extension, Buddy+ purchases and license validation, and privacy or support requests sent to us.

Naggy Buddy is operated by the developer and publisher identified in its Chrome Web Store listing ("Naggy Buddy", "we", "us", or "our"). The publisher's verified trader information is displayed by the Chrome Web Store where required. Privacy questions can be sent to my.nagging.ai@gmail.com.

This policy does not apply to the third-party websites that a user chooses as nudge sites. Naggy Buddy does not control those websites or their privacy practices.

2. Privacy summary

Naggy Buddy's reminder and tracking features run locally in the extension. Naggy Buddy has no user account system, analytics, advertising, telemetry, cloud sync, remote logging, or Naggy Buddy server.

Browsing activity, selected hostnames, reminder state, and page content are not sent to us or Lemon Squeezy. The only automatic external runtime requests are Buddy+ license activation, validation, and deactivation requests made after a user chooses to activate Buddy+.

3. Information processed locally

Naggy Buddy stores only the information needed to provide reminders and manage Buddy+:

• normalized hostnames selected as nudge sites and their registration order
• reminder interval, app language, browser-start preference, Deep Nudge preference, and pause state
• current reminder-session timing, temporary inactive state, and duplicate-reminder markers
• temporary permission-request state, which is cleared when the request finishes or Chrome restarts
• Buddy+ license key, Lemon Squeezy-issued license instance ID, license status, validation timestamps, short error state, and a local revision number when Buddy+ is activated

Naggy Buddy checks the focused active tab's hostname to decide whether a selected site is active. It may also check whether visible video or audible media is playing so idle or locked time is handled correctly. These checks run locally.

Naggy Buddy does not read or store page text, page titles, query strings, URL paths, form data, messages, cookies, or full browsing history. Full URLs are normalized to hostnames before reminder state is stored. Browser-internal pages, extension pages, local files, non-HTTP URLs, and Chrome Web Store pages are not tracked or saved as nudge sites.

The operator cannot remotely access the information stored in the extension's Chrome storage.

4. Buddy+ license validation and international transfer

If a user chooses to activate Buddy+, the extension sends the following information over HTTPS to the Lemon Squeezy License API:

• the license key entered by the user
• the fixed instance name Naggy Buddy Chrome Extension during activation
• the Lemon Squeezy-issued license instance ID during later validation or deactivation
• standard connection information that Lemon Squeezy may receive when handling an HTTPS request, such as IP address, browser or user-agent information, and request time

The purpose is to activate, validate, or deactivate Buddy+ access, enforce the activation limit, prevent license abuse, and provide the purchased features. Naggy Buddy does not include selected sites, full URLs, page text, reminder state, or browsing activity in these requests.

Lemon Squeezy's License API may return order and customer metadata. The extension uses only the product, license, status, and instance information needed to confirm entitlement. It does not store the customer's name, email address, or the raw API response.

License validation normally occurs no more than once every 24 hours when Chrome gives the extension an opportunity to run. A validation request may also occur when the user explicitly activates, refreshes, or deactivates Buddy+.

The recipient is Lemon Squeezy, currently operated by Sold through Link, LLC. Lemon Squeezy states that information may be stored or processed in the United States and in locations where its partners or providers maintain facilities. Transfers occur electronically over HTTPS. Lemon Squeezy retains information as needed to provide its services and meet legal, accounting, security, and fraud-prevention obligations under its own policy.

A user may refuse this transfer by not activating Buddy+. The free features remain available, but Buddy+ features cannot be activated or periodically validated without the License API. See Lemon Squeezy's Privacy Policy.

5. Buddy+ checkout and order records

When a user opens the Buddy+ checkout, the user leaves the extension and completes the purchase on Lemon Squeezy's website. Lemon Squeezy acts as the merchant of record and independently handles checkout details such as the buyer's name, email address, billing and payment information, tax information, and standard website or device logs under its own privacy policy and buyer terms.

The Naggy Buddy operator may access order records made available in the Lemon Squeezy merchant dashboard, including the buyer's name and email address, country or postal information, product and order details, license status, amount, tax or refund status, and card brand. We use this information only to fulfill the purchase, administer licenses, provide support, handle refunds or disputes, prevent fraud, and meet legal or accounting obligations. We do not receive a buyer's full payment-card number or card security code, and we do not maintain a separate Naggy Buddy customer database.

6. Support messages and website hosting

If a user contacts us by email, we receive the sender's email address, message, attachments, and any information the sender chooses to include. We use it only to respond, provide support, resolve disputes, protect the service, or comply with law. Support email is provided through Gmail and is also subject to Google's Privacy Policy.

The public Naggy Buddy website and this policy are hosted using GitHub Pages. Visiting the website may cause GitHub to process standard connection and device information under the GitHub General Privacy Statement. The Naggy Buddy website does not add analytics, advertising, tracking pixels, contact forms, or account features.

7. Legal bases

Where applicable law requires a legal basis, we process information on one or more of the following bases:

• performance of a contract or steps requested by the user, including providing reminders, Buddy+ licensing, purchases, refunds, and support
• the user's request or consent, including granting optional site access and initiating Buddy+ activation
• our legitimate interests in operating and securing the product, preventing fraud and license abuse, and responding to support requests
• compliance with legal, tax, accounting, consumer-protection, and dispute-resolution obligations

Site access and Buddy+ activation are optional and can be withdrawn as described below.

8. Retention and user control

• Local settings and reminder state remain in Chrome storage until the user changes them or removes the extension.
• Temporary permission-request state is held in Chrome session storage and is cleared when the request finishes or Chrome restarts.
• A user can remove nudge sites, revoke site access in Chrome, pause reminders, and turn off Deep Nudge.
• Deactivating Buddy+ removes the locally stored activation after Lemon Squeezy confirms deactivation. Removing the extension clears its local Chrome storage.
• Purchase, license, tax, refund, and fraud-prevention records in Lemon Squeezy are retained according to Lemon Squeezy's policy and applicable legal obligations.
• Support messages are kept only as long as reasonably needed to answer the request, maintain necessary support history, resolve disputes, or comply with law.

9. Sharing, sale, and advertising

Naggy Buddy does not sell personal information, share it for targeted advertising, or use it for credit decisions. It does not allow people to read browsing activity or page content.

Information is disclosed only to the service providers described in this policy, when the user requests the related service, or when required to comply with law, enforce rights, prevent fraud, or protect users and the service.

10. User rights

Depending on location, a user may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, withdraw consent, and complain to a data-protection authority.

Most extension data is available only on the user's device and can be controlled directly by changing settings, removing sites, revoking permissions, deactivating Buddy+, or removing the extension. For requests concerning order records or support messages available to us, contact my.nagging.ai@gmail.com. Lemon Squeezy requests may also be directed to Lemon Squeezy under its privacy policy.

We may need enough information to verify a request and may retain information where required by law or necessary to establish, exercise, or defend legal claims.

11. Children

Naggy Buddy is a general productivity tool and is not directed to children under 13. We do not knowingly collect personal information directly from children. If a parent or guardian believes a child has provided personal information through a purchase or support request, they may contact us to request review or deletion.

12. Security, permissions, and Limited Use

Naggy Buddy restricts Chrome local-storage access to trusted extension contexts, uses HTTPS for license requests, packages executable code with the extension, and does not execute remotely hosted code. No method of storage or transmission is completely secure, but we limit information and access to what is reasonably necessary for the product.

Chrome permissions are used only for reminder timing, local state, focused active-tab hostname matching, idle or locked-state handling, local media-playback checks, favicon display, reminder-overlay injection, and the user-confirmed Close tab action. Optional site access is requested only after a user chooses a nudge site.

Naggy Buddy uses browser and site-access information only to provide its user-facing reminder feature. Its use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

13. Changes and contact

Material changes to this policy will be posted at the same public location. Where required, we will provide notice or obtain consent before a new data practice takes effect.

Privacy questions and rights requests can be sent to my.nagging.ai@gmail.com.